MUJI Says Card Numbers May Have Been Accessed in a 1.09 Million-Record Cohort

Ryohin Keikaku and Credit Saison say full MUJI Card numbers may have been accessed in a roughly 1.09 million-record cohort. Here is what customers should check now.

Technology news, troubleshooting guidance, cybersecurity explainers, and small-business IT advice from The IT Guys.

Ryohin Keikaku and Credit Saison say full MUJI Card numbers may have been accessed in a roughly 1.09 million-record cohort. Here is what customers should check now.

Zyxel says ten GS1900 switch models need model-specific .3 firmware for CVE-2026-107441. The prior .2 builds are not sufficient for this newly assigned flaw.

Wednesday’s five-story technology recap covers OpenAI’s planned Pierre acquisition, Daybreak Red in AWS GovCloud, Google’s health-AI evaluation framework, CodeQL 2.27.4, and GitHub Copilot inside Xcode’s coding assistant.

Asoview says 15,821,184 records—not 15.8 million unique people—were exposed through the Arara Message breach. Here is what was involved, what users should do and what remains unknown.

Tuesday’s five-story technology recap covers Google’s education-AI changes and APAC scam defenses, GitHub Dependabot support for Agent Package Manager, Apple’s fiscal fourth-quarter results, and NVIDIA’s claims about AI-assisted chip manufacturing.

Monday’s five-story technology recap covers GitHub workflow protections, repository-security visibility, Cloudflare DNS engineering, a Microsoft-Lumen network collaboration, and cyberattacks on European refrigeration controllers.

Synology says ransomware attackers are exploiting a vulnerability patched in December 2024. The reviewed Synology notice does not identify the exploited vulnerability; here are fixed DSM thresholds and cited response steps.

If compromise is suspected, preserve relevant evidence before remediation. CVE-2026-120338 affects prefab-ui from 0.14.0 up to, but not including, 0.21.0 when Generative UI, Deno, and tool access align. Upgrade to 0.21.0 or later.

BTCPay Server says an attack vector targeted versions 2.4.1 and older after reports of hot-wallet drains. Here is what operators should do now.

CVE-2026-120189 is a CVSS 4.0 10.0 stack-based buffer overflow affecting D-Link DIR-505 firmware 1.10B02. D-Link lists no fixed firmware and advises retiring and replacing the unsupported router.